Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: 8rR5R0rfWF5LeKzjxuE1Q8orvbWQzS9iz/CCS7iFL5Q=
Subject key identifier: 6C:BB:2E:04:3A:F7:9E:28:57:89:6E:B2:EC:B6:CE:01:D2:3F:24:63
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 0196C5DF1BACA7911C0F2AEF73BAAC669CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 08A8
Signing time: Mon 12 May 2025 19:00:55 +0000
Manifest this update: Mon 12 May 2025 19:00:55 +0000
Manifest next update: Tue 13 May 2025 19:00:55 +0000
Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: YQTz6mimZlLndW7WiSGf7LI52wmoA3mr6z0hP3AWQnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:df:1b:ac:a7:91:1c:0f:2a:ef:73:ba:ac:66:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: May 12 19:00:55 2025 GMT
Not After : May 13 19:00:55 2025 GMT
Subject: CN=6cbb2e043af79e2857896eb2ecb6ce01d23f2463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:25:27:4c:4d:13:31:19:0a:12:e6:07:66:
99:5a:05:83:f1:ba:61:30:9c:9d:99:b2:20:73:ef:
47:58:74:79:e3:ed:fe:36:a8:7f:68:34:62:d1:c3:
51:a1:7b:96:7d:7c:29:9e:04:c3:bd:a8:83:4a:d0:
2a:1e:83:c2:c9:15:91:2d:85:24:bd:fd:c5:dd:f4:
97:f5:5d:17:47:d1:f2:22:05:02:0c:f6:16:89:63:
08:f1:48:10:4a:83:a1:a2:56:6a:0f:9a:27:2b:3e:
dd:bb:6d:92:70:48:79:05:b2:64:2f:36:bc:fb:2c:
a0:ba:f4:b4:23:a8:0b:bf:02:55:19:85:12:9f:6f:
39:93:1e:2b:76:5d:c2:b8:e3:94:c0:b4:ac:ea:3f:
23:f1:58:c4:74:3e:2d:a4:5f:9c:41:38:41:71:ba:
eb:91:20:ed:f1:0c:3e:1b:03:b5:d0:7e:2b:94:2e:
3e:ff:ae:17:40:58:50:a8:72:03:62:15:50:f1:37:
f2:85:25:da:51:a5:a7:d9:32:bf:9d:12:ee:c9:d3:
dd:1a:f2:01:4b:d2:3f:b5:55:48:45:68:bd:e3:e7:
fb:8b:c6:ba:ef:c5:ec:55:1b:75:72:d9:d5:c1:8b:
a6:44:4a:43:c6:4b:a0:e1:8c:ff:76:e4:77:a2:d4:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BB:2E:04:3A:F7:9E:28:57:89:6E:B2:EC:B6:CE:01:D2:3F:24:63
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ed:ec:4c:82:31:2e:49:99:4a:2c:62:54:32:68:0d:5c:97:
63:f4:bf:19:30:30:1c:16:96:d1:d7:bd:f1:0f:4a:14:77:1c:
99:17:b0:02:9c:28:ad:e4:cd:2c:65:f0:64:4e:7a:78:4d:2a:
b0:f7:9d:62:28:42:b0:e9:ef:61:1f:ac:f4:77:00:da:35:77:
42:c0:61:fe:f9:a4:07:c0:f4:00:79:d0:0d:61:87:08:97:5d:
57:ef:d4:92:c3:01:f2:ad:fb:32:4f:64:2c:2e:81:3c:ff:10:
f3:38:04:bc:f3:39:81:97:1d:39:e8:1d:9b:f5:be:75:4a:96:
11:56:2a:87:17:3c:fe:31:90:2f:99:c7:f0:b6:23:1b:59:74:
ae:fe:51:bc:3a:49:70:95:8a:79:71:5f:3a:1c:df:56:e1:ea:
9c:fe:b8:a0:fb:ae:66:ea:30:7a:2a:96:43:14:83:7d:ee:1f:
c0:e3:53:e5:00:d5:c0:63:e1:f9:97:80:51:91:f0:06:0a:de:
9a:33:80:6d:ae:4d:b4:e1:7d:f5:d5:a4:b0:bf:06:e0:a1:c9:
ad:a8:9e:2f:54:ea:3e:ea:ff:30:98:b5:43:a7:ef:83:f1:5b:
11:8f:4a:a5:e2:30:8e:27:94:c1:9d:9f:0c:e0:a2:43:03:e1:
1c:93:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:06:42 2025 by rpki-client